Privacy Policy

1. Controller

SwissCreo GmbH (“Kingsel”, “we”)
Moosacherstrasse 6
8804 Au ZH, Switzerland
Email: contact@kingsel.com

This policy covers the website kingsel.com and the Shopify app B2B Kingsel (including the field sales portal at app.kingsel.com).

2. The short version

• This website uses no tracking, no advertising cookies, and no analytics tools.
• In the app, we only process the data required for field sales ordering — on behalf of the respective merchant.
• We never sell data and only share it with the technical providers listed below.
• Shopify deletion requests (GDPR webhooks) are executed automatically.

3. Website (kingsel.com)

The website is hosted by Infomaniak Network SA (Geneva, Switzerland). When you visit, the server processes technically necessary access data (IP address, time, requested page) in server logs. Fonts are loaded via Google Fonts; Google receives your IP address in the process. Beyond that, the website sets no cookies and uses no trackers.

4. The app: roles

When a merchant installs B2B Kingsel, the merchant remains the data controller for their customers’ data. We process this data as a data processor, exclusively to provide the app’s functionality. A data processing agreement (DPA) is available on request at contact@kingsel.com.

5. What data the app processes

• Shop data: shop domain, shop settings, product catalog, inventory levels.
• The merchant’s customer data: name, company, email, phone number, shipping/billing address, orders, and customer-specific prices — as maintained by the merchant in Shopify.
• Employee data: name, email, phone number (optional), language, and role of the field sales accounts the merchant creates.
• Order and usage data: orders captured in the field, delivery notes, notes, and commission data.

The sole purpose is operating the field sales solution: customer management, pricing, order capture (including offline), documents, and synchronization with Shopify. The data is not used for any other purpose — in particular not for advertising or profiling.

6. Technical providers (sub-processors)

• Shopify Inc. — e-commerce platform, source and destination of synchronized data.
• Railway Corp. (USA) — hosting of the app servers and database.
• Clerk Inc. (USA) — login and account management for field sales access (email, name, credentials).
• Functional Software Inc. (Sentry) (USA) — technical error diagnostics; error reports are transmitted without unnecessary personal data.
• Resend Inc. (USA) — delivery of system emails (e.g. invitations).
• Infomaniak Network SA (Switzerland) — hosting of this website.

Where data is transferred to the USA, we rely on EU standard contractual clauses or equivalent safeguards provided by these vendors.

7. Retention and deletion

• Data is stored only as long as needed to operate the app.
• Shopify deletion requests (customers/redact, shop/redact) are executed automatically: customer data is deleted at the merchant’s request, shop data after uninstallation in line with Shopify’s requirements.
• Data access requests (customers/data_request) are answered via the merchant.
• Encrypted backups are rotated on a regular schedule.

8. Security

• All connections are TLS-encrypted; the database is encrypted at rest, as are backups.
• Access to production data is limited to a very small circle; field sales accounts only see the customers assigned to them.
• Logins are protected by password policies and device confirmation via email code.
• Access is logged; test and production data are kept separate.

Security incidents: In the event of an incident we first contain it (lock accounts, rotate keys), then analyze the cause and notify affected merchants without undue delay, at the latest within 72 hours of becoming aware.

9. Your rights

You have the right to access, rectification, erasure, restriction of processing, and data portability. End customers of a merchant should contact their merchant directly — as a processor, we act on the merchant’s instructions. For any request, reach us at contact@kingsel.com.

10. Changes

We update this policy when the app or the providers we use change. The version published here applies.

Last updated: August 3, 2026